Heya #powershell folk, recently shipped the latest version of EntraAuth, my #entra token generator:
This should now result in only a single interactive logon prompt:
Connect-EntraService -Service Graph, GraphBeta, Security -ClientID $clientID -TenantID $tenantID -UseRefreshToken
This should now result in only a single interactive logon prompt:
Connect-EntraService -Service Graph, GraphBeta, Security -ClientID $clientID -TenantID $tenantID -UseRefreshToken
December 8, 2024 at 12:51 PM
Heya #powershell folk, recently shipped the latest version of EntraAuth, my #entra token generator:
This should now result in only a single interactive logon prompt:
Connect-EntraService -Service Graph, GraphBeta, Security -ClientID $clientID -TenantID $tenantID -UseRefreshToken
This should now result in only a single interactive logon prompt:
Connect-EntraService -Service Graph, GraphBeta, Security -ClientID $clientID -TenantID $tenantID -UseRefreshToken
🚀I've published my #GetMailprotection #PowerShell Script v1.15 to #PowerShellGallery.
the Script checks diffrent DNS Informations about a Domain - mostly about Mailsecurity Settings. #DNSSEC #CAA #MX #SPF #DMARC #MTASTS #DANE #TLSRPT #TenantID #SecurityTXT and many more
bit.ly/4fyhoXh
the Script checks diffrent DNS Informations about a Domain - mostly about Mailsecurity Settings. #DNSSEC #CAA #MX #SPF #DMARC #MTASTS #DANE #TLSRPT #TenantID #SecurityTXT and many more
bit.ly/4fyhoXh
November 20, 2024 at 9:30 PM
🚀I've published my #GetMailprotection #PowerShell Script v1.15 to #PowerShellGallery.
the Script checks diffrent DNS Informations about a Domain - mostly about Mailsecurity Settings. #DNSSEC #CAA #MX #SPF #DMARC #MTASTS #DANE #TLSRPT #TenantID #SecurityTXT and many more
bit.ly/4fyhoXh
the Script checks diffrent DNS Informations about a Domain - mostly about Mailsecurity Settings. #DNSSEC #CAA #MX #SPF #DMARC #MTASTS #DANE #TLSRPT #TenantID #SecurityTXT and many more
bit.ly/4fyhoXh
Hi #powershell folks,
proud to announce the latest version of EntraAuth, my Entra token generator & request handler, now adding support for federated credentials:
Connect-EntraService -ClientID $clientID -TenantID $tenantID -Federated
github.com/FriedrichWei...
proud to announce the latest version of EntraAuth, my Entra token generator & request handler, now adding support for federated credentials:
Connect-EntraService -ClientID $clientID -TenantID $tenantID -Federated
github.com/FriedrichWei...
GitHub - FriedrichWeinmann/EntraAuth
Contribute to FriedrichWeinmann/EntraAuth development by creating an account on GitHub.
github.com
July 11, 2025 at 8:31 PM
Hi #powershell folks,
proud to announce the latest version of EntraAuth, my Entra token generator & request handler, now adding support for federated credentials:
Connect-EntraService -ClientID $clientID -TenantID $tenantID -Federated
github.com/FriedrichWei...
proud to announce the latest version of EntraAuth, my Entra token generator & request handler, now adding support for federated credentials:
Connect-EntraService -ClientID $clientID -TenantID $tenantID -Federated
github.com/FriedrichWei...
A huge amount of @liveblocks.io updates have been released, including full multi-tenancy!
Partition your app into different workspaces, each with their own documents, inboxes, more. Set a `tenantId` when you create a resource, and it just works.
There's 10 more new features too…
Partition your app into different workspaces, each with their own documents, inboxes, more. Set a `tenantId` when you create a resource, and it just works.
There's 10 more new features too…
November 13, 2025 at 4:47 PM
A huge amount of @liveblocks.io updates have been released, including full multi-tenancy!
Partition your app into different workspaces, each with their own documents, inboxes, more. Set a `tenantId` when you create a resource, and it just works.
There's 10 more new features too…
Partition your app into different workspaces, each with their own documents, inboxes, more. Set a `tenantId` when you create a resource, and it just works.
There's 10 more new features too…
I look at it like an investment
"my tenantID isn't in the approved tenants can you add it please"
"no okay you can uninstall and reinstall visual studio for me first. that's fine"
"my tenantID isn't in the approved tenants can you add it please"
"no okay you can uninstall and reinstall visual studio for me first. that's fine"
April 1, 2025 at 2:24 PM
I look at it like an investment
"my tenantID isn't in the approved tenants can you add it please"
"no okay you can uninstall and reinstall visual studio for me first. that's fine"
"my tenantID isn't in the approved tenants can you add it please"
"no okay you can uninstall and reinstall visual studio for me first. that's fine"
📢I've published the new Version 1.16 of my Get-Mailprotection #PowerShell Script to the #PowerShellGallery
DNSSEC, MX, Reverse Lookup, STARTTLS, SPF, DKIM, DMARC, DANE, MTA-STS, TLSRPT, BIMI, CAA, Autodiscover, Lyncdiscover, Teamsfederation, M365, TenantID, Security.txt
bit.ly/3XTuszv
DNSSEC, MX, Reverse Lookup, STARTTLS, SPF, DKIM, DMARC, DANE, MTA-STS, TLSRPT, BIMI, CAA, Autodiscover, Lyncdiscover, Teamsfederation, M365, TenantID, Security.txt
bit.ly/3XTuszv
March 15, 2025 at 8:43 AM
📢I've published the new Version 1.16 of my Get-Mailprotection #PowerShell Script to the #PowerShellGallery
DNSSEC, MX, Reverse Lookup, STARTTLS, SPF, DKIM, DMARC, DANE, MTA-STS, TLSRPT, BIMI, CAA, Autodiscover, Lyncdiscover, Teamsfederation, M365, TenantID, Security.txt
bit.ly/3XTuszv
DNSSEC, MX, Reverse Lookup, STARTTLS, SPF, DKIM, DMARC, DANE, MTA-STS, TLSRPT, BIMI, CAA, Autodiscover, Lyncdiscover, Teamsfederation, M365, TenantID, Security.txt
bit.ly/3XTuszv
Get TenantId for any Azure Subscription by Gregor Suttie #PowerShell #Azure https://gregorsuttie.com/2024/12/30/get-tenantid-for-any-azure-subscription/?utm_source=bluesky&utm_medium=social&utm_campaign=azureweekly
Get TenantId for any Azure Subscription - Azure Greg
How I Used GitHub Copilot to Write a PowerShell GUI for Azure Tenant ID Lookup When tasked with creating a PowerShell GUI to retrieve the Azure Tenant ID for any subscription, I decided to rely entirely...
gregorsuttie.com
January 14, 2025 at 6:30 AM
Get TenantId for any Azure Subscription by Gregor Suttie #PowerShell #Azure https://gregorsuttie.com/2024/12/30/get-tenantid-for-any-azure-subscription/?utm_source=bluesky&utm_medium=social&utm_campaign=azureweekly
Get TenantId for any Azure Subscription
Simplify your Azure management tasks today #Azure
https://isaacl.dev/f95
Simplify your Azure management tasks today #Azure
https://isaacl.dev/f95
February 14, 2025 at 11:00 PM
Get TenantId for any Azure Subscription
Simplify your Azure management tasks today #Azure
https://isaacl.dev/f95
Simplify your Azure management tasks today #Azure
https://isaacl.dev/f95
My appsettings.json:
"AzureAd": {
"Instance": "https://login.microsoftonline.com/",
"Domain": "<blah>.onmicrosoft.com",
"TenantId": "<guid>",
"ClientId": "<revoked>",
"CallbackPath": "/signin-oidc",
"ClientSecret": "<revoked>",
"ServicePrincipalId": "<revoked>",
"ClientCertificates": []
}
"AzureAd": {
"Instance": "https://login.microsoftonline.com/",
"Domain": "<blah>.onmicrosoft.com",
"TenantId": "<guid>",
"ClientId": "<revoked>",
"CallbackPath": "/signin-oidc",
"ClientSecret": "<revoked>",
"ServicePrincipalId": "<revoked>",
"ClientCertificates": []
}
November 19, 2025 at 8:51 PM
My appsettings.json:
"AzureAd": {
"Instance": "https://login.microsoftonline.com/",
"Domain": "<blah>.onmicrosoft.com",
"TenantId": "<guid>",
"ClientId": "<revoked>",
"CallbackPath": "/signin-oidc",
"ClientSecret": "<revoked>",
"ServicePrincipalId": "<revoked>",
"ClientCertificates": []
}
"AzureAd": {
"Instance": "https://login.microsoftonline.com/",
"Domain": "<blah>.onmicrosoft.com",
"TenantId": "<guid>",
"ClientId": "<revoked>",
"CallbackPath": "/signin-oidc",
"ClientSecret": "<revoked>",
"ServicePrincipalId": "<revoked>",
"ClientCertificates": []
}
📣I've published a new Version of my Get-Mailprotection #PowerShell Script to the #PowerShellGallery #NS #MX #SPF #DKIM #DMARC #BIMI #MTASTS #TLSRPT #DNSSEC #DANE #TenantID #STARTTLS
www.powershellgallery.com/packages/Get...
www.powershellgallery.com/packages/Get...
March 30, 2024 at 11:13 AM
📣I've published a new Version of my Get-Mailprotection #PowerShell Script to the #PowerShellGallery #NS #MX #SPF #DKIM #DMARC #BIMI #MTASTS #TLSRPT #DNSSEC #DANE #TenantID #STARTTLS
www.powershellgallery.com/packages/Get...
www.powershellgallery.com/packages/Get...
Question for any Entra nerds out there, particularly Identity Governance - Is there a clean way to get all PIM assignments that happen via Identity Governance? I am querying graph and schedulerequest data doesn't mention an app. It seems to put tenantID for the user when doing IG. Thoughts?
November 10, 2025 at 5:09 PM
Question for any Entra nerds out there, particularly Identity Governance - Is there a clean way to get all PIM assignments that happen via Identity Governance? I am querying graph and schedulerequest data doesn't mention an app. It seems to put tenantID for the user when doing IG. Thoughts?
@nathanmcnulty.com oh, I am dumb - it's right here, but showing as the user. My tenant ID starts with an e and never looked further - I thought it was sticking my tenantID in here.
I feel like this data should show IG in the app block, and then the user who made the request in the user block...
I feel like this data should show IG in the app block, and then the user who made the request in the user block...
November 10, 2025 at 5:57 PM
@nathanmcnulty.com oh, I am dumb - it's right here, but showing as the user. My tenant ID starts with an e and never looked further - I thought it was sticking my tenantID in here.
I feel like this data should show IG in the app block, and then the user who made the request in the user block...
I feel like this data should show IG in the app block, and then the user who made the request in the user block...
I discovered that multi‑tenant isolation must be enforced at the repository layer, not just in controllers. Adding a tenantId filter to DB queries stopped three cross‑org bugs and saved hours of debugging.
September 16, 2026 at 8:06 PM
I discovered that multi‑tenant isolation must be enforced at the repository layer, not just in controllers. Adding a tenantId filter to DB queries stopped three cross‑org bugs and saved hours of debugging.
His mother-in-law moved in and handed him a ‘Best Son-in-Law’ mug with one instruction: earn it.
Then their hands touched.
Read the prologue: https://yumeku.com/comics/best-son-in-law/prologue/?linkId=lp_282176&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=bsl_prologue_ymk0003
Then their hands touched.
Read the prologue: https://yumeku.com/comics/best-son-in-law/prologue/?linkId=lp_282176&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=bsl_prologue_ymk0003
September 20, 2026 at 2:12 PM
His mother-in-law moved in and handed him a ‘Best Son-in-Law’ mug with one instruction: earn it.
Then their hands touched.
Read the prologue: https://yumeku.com/comics/best-son-in-law/prologue/?linkId=lp_282176&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=bsl_prologue_ymk0003
Then their hands touched.
Read the prologue: https://yumeku.com/comics/best-son-in-law/prologue/?linkId=lp_282176&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=bsl_prologue_ymk0003
She took a dragon bounty. Instead, she found a suspiciously charming bard in a cave—and his curse has terrible timing.
Read the prologue: https://yumeku.com/comics/slay-me-huntress/prologue/?linkId=lp_787797&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=smh_prologue_ymk0001
Read the prologue: https://yumeku.com/comics/slay-me-huntress/prologue/?linkId=lp_787797&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=smh_prologue_ymk0001
September 19, 2026 at 1:27 PM
She took a dragon bounty. Instead, she found a suspiciously charming bard in a cave—and his curse has terrible timing.
Read the prologue: https://yumeku.com/comics/slay-me-huntress/prologue/?linkId=lp_787797&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=smh_prologue_ymk0001
Read the prologue: https://yumeku.com/comics/slay-me-huntress/prologue/?linkId=lp_787797&sourceId=social&tenantId=toonia&affS5=bluesky&affS4=smh_prologue_ymk0001
Aprendí que validar el aislamiento en cada endpoint con pruebas de cobertura es esencial en arquitectura multi‑tenant. Añadí asserts de tenantId en los tests y la cobertura subió de 0.86% a >90%, evitando fugas de datos. #multitenancy
September 13, 2026 at 7:26 PM
Aprendí que validar el aislamiento en cada endpoint con pruebas de cobertura es esencial en arquitectura multi‑tenant. Añadí asserts de tenantId en los tests y la cobertura subió de 0.86% a >90%, evitando fugas de datos. #multitenancy
Finalmente resolví el bug de aislamiento en broker-portal.controller.ts. El controlador devolvía datos de todos los tenants porque faltaba filtrar por tenantId. Con tres cambios en la lógica y pruebas unitarias, la ruta ahora respeta el multi‑tenancy.
September 13, 2026 at 7:26 PM
Finalmente resolví el bug de aislamiento en broker-portal.controller.ts. El controlador devolvía datos de todos los tenants porque faltaba filtrar por tenantId. Con tres cambios en la lógica y pruebas unitarias, la ruta ahora respeta el multi‑tenancy.
CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...
CVE-2026-48088: CWE-862: Missing Authorization in open-reception appointment-boo
The vulnerability (CVE-2026-48088) in OpenReception's appointment booking software is a missing authorization (CWE-862) in the POST /api/tenants/{tenantId}/staff/{staffId}/crypto endpoint prior to version 1.0.4. Unauthenticated attackers ca
radar.offseq.com
August 7, 2026 at 12:00 AM
CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...
Kaspersky reports Project CAV3RN now uses Outlook calendar events for C2 and DNS AAAA queries to recover config data, reinforcing low-confidence links to OilRig. #Israel #ProjectCAV3RN #OilRig
New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery
Kaspersky detailed Project CAV3RN, a modular cyberespionage framework targeting Israel that now uses AzureCommunication.dll and Microsoft Graph Outlook calendar events for C2. When Graph authentication fails, the module can recover TenantId, ClientId, ClientSecret, and UserEmail through DNS AAAA queries against cloudlanecdn[.]com, a capability that reinforces the report’s low-confidence attribution to OilRig (APT34). #ProjectCAV3RN #AzureCommunication.dll #cloudlanecdn.com #OilRig #APT34
www.hendryadrian.com
July 21, 2026 at 9:15 PM
Kaspersky reports Project CAV3RN now uses Outlook calendar events for C2 and DNS AAAA queries to recover config data, reinforcing low-confidence links to OilRig. #Israel #ProjectCAV3RN #OilRig
**New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery**
## Introduction
In June 2026, as part of our Kaspersky Threat Intelligence Reporting service, we published extensive research on Project […]
[Original post on poliverso.org]
## Introduction
In June 2026, as part of our Kaspersky Threat Intelligence Reporting service, we published extensive research on Project […]
[Original post on poliverso.org]
July 21, 2026 at 8:59 AM
**New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery**
## Introduction
In June 2026, as part of our Kaspersky Threat Intelligence Reporting service, we published extensive research on Project […]
[Original post on poliverso.org]
## Introduction
In June 2026, as part of our Kaspersky Threat Intelligence Reporting service, we published extensive research on Project […]
[Original post on poliverso.org]